Solved

Time Server

Posted on 2008-10-22
7
213 Views
Last Modified: 2012-05-05
I configured authoritative time server at the top parent domain for my whole forrest.  Server is synchronizing with us.pool.ntp.org.  We have child domains in different countries.  Time changed in one of these countries  and both DC's in this country do not reflect the change because they get their time from top parent domain DC.  How do I stop these DC's from synchronizing with top DC so time can be modified manually in both servers and they reflect local time?  All servers are Windows 2003 Servers.
0
Comment
Question by:virtech
  • 3
  • 3
7 Comments
 
LVL 18

Expert Comment

by:flyingsky
ID: 22779749
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 22779774

You change the time-zone on the remote DCs to the appropriate time zone. The time they sync from the time server on the network will come down in GMT, but if you set the appropriate offset as the time zone (+/- x hours GMT), Windows will adjust the GMT time it receives with the appropriate offset.

-tigermatt
0
 

Author Comment

by:virtech
ID: 22779818
Tiger I am not sure I follow your suggestion.  Would you please explain?
0
Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

 
LVL 58

Expert Comment

by:tigermatt
ID: 22779973

In the Date/Time option in Control Panel, you can choose the 'Time Zone' tab at the top and set the appropriate time zone on the other servers so their time is updated correctly.

Windows handles time back-end in GMT, so changing the time zone means the time is synced from the other DCs in GMT, but then the time zone offset is added to correct this time to whichever timezone the server is located in.

This is the preferred solution. You should not try to directly change the time on these servers, because a difference of +/- 5-15 minutes in the time between servers and workstations will result in failed logins and a failure to authenticate and replicate between DCs, causing fatal issues on the network. This is why the time synchronization facility exists and is enabled by default.

-tigermatt
0
 

Author Comment

by:virtech
ID: 22785423
If I understood you correctly I did the following on my two remote Domain Controllers on child domain in different country.  I changed their time zones to a zone that added 2 hours to their time so now they have the correct time.  Time has remained "correct" since yesterday.

1.  Is this what you suggested?
2. Local workstations on that domain still have wrong time (not the time of the servers)  How do I make sure workstations get their time from these servers?

Thanks.
0
 
LVL 58

Accepted Solution

by:
tigermatt earned 500 total points
ID: 22789885

1. Yes, that is correct; changing the timezone will force it to keep the time at that particular offset even when the re-sync occurs.

2. You need to change the time zone on the workstations. It is set when they are installed, but if it was set wrongly, they will need to be changed. You could try doing it through Group Policy; there's details in the 'Networked PCs' section of http://support.microsoft.com/kb/914387.

-tigermatt
0
 

Author Closing Comment

by:virtech
ID: 31508886
Excelent answer and knowledge
0

Featured Post

Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
How to Install VMware Tools in Red Hat Enterprise Linux 6.4 (RHEL 6.4) Step-by-Step Tutorial

713 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question